> For the complete documentation index, see [llms.txt](https://docs.konvu.com/konvu/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.konvu.com/konvu/get-started/connect-your-environment/source-code/managed-analysis/github-installation.md).

# GitHub Installation

{% hint style="info" %}
Konvu GitHub App supports all GitHub Cloud plans (Free, Pro, Team, Enterprise Cloud) as well as GitHub Enterprise Server (GHES).
{% endhint %}

Integrating Konvu with GitHub provides the following benefits:

* List your repositories
* Analyze your code to figure out your stack (frontend/backend, frameworks, OS, web servers, etc.)
* Import your `GitHub Dependabot Alerts` to triage their exploitability using Konvu's [source code analysis](/konvu/get-started/connect-your-environment/source-code.md). They are imported once a day.

<figure><img src="https://4216786002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fd2uS6kuROSFKDrT5HC1U%2Fuploads%2FBIkAr7L6ptrxWVVsoNnl%2FScreenshot%202025-12-02%20at%2009.43.43.png?alt=media&amp;token=05caa8d9-232e-40ce-be9d-94e87826eff8" alt=""><figcaption></figcaption></figure>

## IP Allowlist for Organizations with IP Restrictions

If your GitHub organization enforces [IP allow list restrictions](https://docs.github.com/en/enterprise-cloud@latest/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-allowed-ip-addresses-for-your-organization), you need to allowlist the following Konvu IP addresses before installing the GitHub App:

| IP Address         | Description                         |
| ------------------ | ----------------------------------- |
| `18.224.192.10/32` | Konvu Production us-east-2a         |
| `3.12.222.117/32`  | Konvu Production us-east-2b         |
| `3.142.188.203/32` | Konvu Production Managed Analysis   |
| `52.15.38.163/32`  | Konvu Production us-east-2c         |
| `128.24.113.14/32` | Konvu Production Managed Analysis 2 |

{% hint style="info" %}
GitHub can automatically add installed GitHub App IPs to your allowlist if you enable this option in your organization settings. See [GitHub's documentation on managing allowed IP addresses](https://docs.github.com/en/enterprise-cloud@latest/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-allowed-ip-addresses-for-your-organization#allowing-access-by-github-apps) for details. If this setting is disabled, you must manually add the IPs above.
{% endhint %}

## Install Konvu GitHub App on Cloud Plans

1. Sign in to Konvu
2. Click **Integrations**
3. Under "Add A New Integration" click on GitHub
4. Click the organization you want to install Konvu on
5. Choose to authorize and install Konvu for **All repositories** or **Only select repositories**. Review the associated permissions
6. Click on **Install**

## Install Konvu on Enterprise Server Instances

{% hint style="info" %}
GHES instances cannot install the Konvu App from the GitHub Marketplace, so customers must create the app directly within their own server.

To simplify this process, Konvu provides a one-click manifest that automatically configures all required permissions, redirect URLs, and webhook endpoints for a seamless integration experience.
{% endhint %}

1. Sign in to Konvu
2. Click **Integrations**
3. Under "Add A New Integration" click on GitHub Enterprise Server
4. Enter the URL of your GHES instance and the name of the organization where you want to create and install the app
5. After clicking Continue, Konvu will redirect you to your GHES instance and automatically open the GitHub App creation page using our manifest. Simply confirm to create the app
6. Once the app is created, you will be redirected back to Konvu so Konvu can register your new GitHub App
7. After registration is complete, Konvu will send you back to your GHES instance to install the app on your organization
8. Choose to authorize and install Konvu for **All repositories** or **Only select repositories**. Review the associated permissions
9. Click on **Install**

Your repositories will automatically be detected and `GitHub Dependabot Alerts` will automatically be imported.

## Permissions Requested

Here are the permissions requested by Konvu and the associated use case

<table><thead><tr><th width="370">Permissions</th><th>Use case</th></tr></thead><tbody><tr><td>Read access to metadata</td><td>Default permission to import repository metadata.</td></tr><tr><td>Read and write access to Dependabot alerts</td><td>Imports Dependabot Alerts to triage them based on exploitability.</td></tr><tr><td>Read access to code</td><td><p>Our app needs Read access to your code to analyze its structure and identify your tech stack, allowing Konvu to filter out irrelevant vulnerabilities.</p><p>Konvu does not store your code. Only minimal stack metadata. Your code stays secure, with privacy as our priority. <a href="/konvu/reference/data-collection-and-security.md">Read more</a>.</p></td></tr><tr><td>Read access to members <mark style="color:$info;">(Cloud Only)</mark></td><td>Easily invite or remove members from your account.</td></tr><tr><td><p>Read and write access to pull request</p><p><mark style="color:$info;">(Cloud Only)</mark></p></td><td>This allows Konvu to comment on Pull Requests with context helpful for your engineers to triage vulnerabilities. The comments are sent manually for now.</td></tr></tbody></table>

In case Konvu needs additional permissions in the future, for Cloud plans, GitHub will always ask you to confirm the change.

## Uninstall Konvu GitHub App

If you wish to uninstall Konvu GitHub App, follow the instructions below:

1. Go to your organization settings on GitHub
2. Click on **Third-Party Access > GitHub Apps**
3. Click on **Configure** under the Konvu App
4. Click on **Uninstall**

Note this page can be easily accessed with the "*Configure in GitHub"* button on the Konvu **Integrations** page.

<figure><img src="https://4216786002-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fd2uS6kuROSFKDrT5HC1U%2Fuploads%2FnNq36aNyRtvL7o7QQ2CZ%2Fimage.png?alt=media&amp;token=04f5ace7-8ada-4eb0-bbb7-5a94c5cb8fc5" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
If you only want to change which repository the GitHub App has access to, you can manage this from **Repository Access**
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.konvu.com/konvu/get-started/connect-your-environment/source-code/managed-analysis/github-installation.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.